Add a setup flag to prevent malicious config changes.